Seeking advice for setting security on a custom SP2013 list.
All users need to be able to create a new item in the list. Users should not see items created by others.
So far, I set secuiry as follows: The list has unique permissions, not inheritting from any parent. A group named "Everyone" have contribute rights
Under List Settings - Advanced - Item Level Security:
"Read access" is set to "Read items that were created by the user"
"Create and Edit access" is set to "Create items and edit items that were created by the user"
This almost achieves my requirements, with one limitation. Sometimes, a users secretary fills out a list item for their boss. In that case, the boss cannot see or edit the item in the future. Only the secretary can read and edit.
There is only 1 secretary, so I thought that I may be able to draft a how-to on changing the security of the item (stop inheritance) and add the boss with "Full Control" on the list item.
My assumption was the Full Control would over-ride the default item-level-security set on the list as mentioned above. I have found that is not the case. When we email a link to the item to the boss after granting him full control on the item, the link is bad for him in the email. We know the link is good because it works for us, so we know this is a permissions issues.
I tried changing "Create and Edit access" is set to "Create and edit all items" however the link still does not work for the boss.
The boss should not see list items created by others.